Career Advice
Microsoft Security Certifications, Ranked: What Actually Moves You Up
All right class.
You're in a SOC. You've been triaging incidents for two years, you're good at it, and you've
Topic
Getting Started
New to Microsoft Sentinel? Start here: create the workspace, connect data, write your first analytic rule, learn KQL and work your first incident.
6 posts
Career Advice
Microsoft Security Certifications, Ranked: What Actually Moves You Up
All right class.
You're in a SOC. You've been triaging incidents for two years, you're good at it, and you've
Microsoft Sentinel
The KQL Playbook (Play #2): Mastering the Matching Game
Alright, class. Welcome back to the KQL playbook.
In our last session, we covered the four core moves of KQL. You learned how to grab a table, filter
Microsoft Sentinel
Microsoft Sentinel: An Incident Just Fired. Now What? (A Beginner's Guide to Investigation)
Welcome back to the command centre, class. So far, you've deployed Sentinel, connected your data, and built your first Analytic Rule. You've essentially set
Microsoft Sentinel
Microsoft Sentinel: From Logs to Alerts - Creating Your First Analytic Rule
Welcome back, class! In our last lesson, we successfully turned on the data firehose with Data Connectors. Your Sentinel instance is now collecting logs, which is a fantastic
Microsoft Sentinel
So You've Deployed Sentinel. Now What? A Guide to Data Connectors
Alright, class, take your seats. In our last lesson, you successfully deployed a shiny new Microsoft Sentinel instance. It’s sitting there, full of potential, looking clean and
Microsoft Sentinel
How to create Microsoft Sentinel
How to create your first Microsoft Sentinel instance!
Whether you are an IT Pro or starting your journey in cybersecurity, you may end up creating a Sentinel instance
Get the next post by email
One email per post, plus the KQL Vault. That's the whole deal.